PyPi: Mindsdb

CVE-2024-3575

Safety vulnerability ID: 71895

This vulnerability was reviewed by experts

The information on this page was manually curated by our Cybersecurity Intelligence Team.

Created at Apr 16, 2024 Updated at Nov 26, 2024

Scan your Python projects for vulnerabilities →

Advisory

A vulnerability has been identified in both the cloud and OSS versions of the software, where uploading a CSV file containing a JavaScript payload can trigger a Cross-site Scripting (XSS) attack when the file is viewed. This can lead to significant security risks including browser hijacking, information theft, and account hijacking.

Affected package

mindsdb

Latest version: 24.11.4.0

MindsDB's AI SQL Server enables developers to build AI tools that need access to real-time data to perform their tasks

Affected versions

Fixed versions

Vulnerability changelog

This vulnerability has no description

Resources

Use this package?

Scan your Python project for dependency vulnerabilities in two minutes

Scan your application